CVE-2018-7846

Summary

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

Affected Software

VendorProductVersion RangeStatus
n/aModicon M580 Modicon M340 Modicon Quantum Modicon PremiumModicon M580 Modicon M340 Modicon Quantum Modicon Premiumaffected

Weaknesses

  • Multiple Vulnerabilities

ADP Enrichment

CVE Program Container

Additional References

References